Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RnRz6y0uqe8ygjpc6hWOJ33IEWc.roa
File: RnRz6y0uqe8ygjpc6hWOJ33IEWc.roa (raw, json)
Hash identifier: U8BklFCbbKwF2SJCMeCdCjCC0P4ZXJOmUnx1283MNhc=
Subject key identifier: 46:74:73:EB:2D:2E:A9:EF:32:82:3A:5C:EA:15:8E:27:7D:C8:11:67
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01949921A52301AA307004490D541F702ED8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RnRz6y0uqe8ygjpc6hWOJ33IEWc.roa
Signing time: Fri 24 Jan 2025 16:25:06 +0000
ROA not before: Fri 24 Jan 2025 16:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 93.114.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 07:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:21:a5:23:01:aa:30:70:04:49:0d:54:1f:70:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 24 16:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467473eb2d2ea9ef32823a5cea158e277dc81167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:4c:71:52:c0:9a:9a:f0:97:3a:45:0a:7c:
d1:61:da:b1:34:c2:09:44:aa:99:80:6e:16:19:a2:
cd:c4:8e:d8:84:fd:d7:b4:0f:8d:38:82:3b:29:bc:
c6:67:56:6d:58:a0:73:1d:b3:12:58:2d:d3:c8:9a:
26:84:f7:08:1a:e0:d5:14:b4:26:b5:2a:8e:90:82:
a7:87:96:ea:8f:3d:81:db:d7:60:bd:c0:22:83:83:
b4:22:93:27:0e:cb:ae:53:08:25:4e:dc:ae:ab:84:
2a:20:f4:51:9e:dc:0d:27:bd:37:08:01:c7:06:a6:
0f:62:66:9c:8f:0e:17:38:46:79:69:b5:49:6b:8d:
8b:6a:e8:96:7a:21:c9:fa:54:43:47:ea:e0:39:dc:
0a:cf:15:11:3b:36:9d:f6:08:d5:92:a8:33:5e:0a:
9f:46:5b:eb:d7:33:05:e4:58:3c:ab:cc:c9:a8:ae:
3c:07:37:15:3c:0f:2b:6c:c2:94:fe:9a:61:f2:d9:
6c:10:1d:39:af:b0:a6:59:47:69:bb:a3:b2:21:8c:
1b:d1:4b:63:9e:f4:f5:5a:6d:61:12:68:30:b5:a0:
37:dd:4d:1b:ba:97:13:7f:34:a8:c0:a0:a4:78:cd:
17:bb:df:64:ec:da:8e:a6:91:a8:e8:b3:7a:7e:01:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:73:EB:2D:2E:A9:EF:32:82:3A:5C:EA:15:8E:27:7D:C8:11:67
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RnRz6y0uqe8ygjpc6hWOJ33IEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.88.0/24
Signature Algorithm: sha256WithRSAEncryption
64:58:51:40:02:df:2b:c6:67:21:a5:c1:4f:e9:c7:d1:f3:d0:
95:e9:34:f2:12:3c:fe:b2:1a:85:52:6c:4c:03:df:b0:07:93:
80:3c:3e:19:9d:7a:ca:6a:ae:fd:02:d2:a0:91:46:32:23:16:
47:8c:9c:72:87:93:c6:75:92:19:af:e6:a2:be:f3:8b:8f:2e:
54:52:64:4a:2e:5e:4f:83:3d:40:71:c0:19:11:c0:77:56:0f:
52:e6:4b:ad:6a:ad:27:7e:01:77:6b:2a:77:33:b2:4f:b5:2a:
2c:9a:5a:78:84:7f:23:30:ea:b7:e2:2e:f8:fa:41:75:8a:9a:
7b:e0:c3:2d:43:08:5f:a5:e0:ba:95:98:7e:22:33:f0:57:a0:
c8:0d:72:bd:dd:6b:df:68:b6:36:7f:55:2b:11:ae:8e:b2:28:
b6:06:43:7e:bb:09:c4:88:6b:ba:2b:e6:1e:7a:e2:b4:82:fd:
53:e0:16:cc:d3:0d:37:b2:2a:f5:2c:5c:b3:90:7a:91:bd:de:
82:fb:f6:f5:db:8a:d6:36:d0:29:3a:55:a0:db:e0:59:fc:98:
bd:f5:55:c8:66:e8:2d:c9:a8:d2:ba:4a:5d:6e:42:3c:df:4f:
c5:fb:34:b6:95:62:65:1e:06:28:a3:ce:ea:08:b4:9c:45:13:
0c:3b:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:49:45 2025 by rpki-client